Index: src/compiler/verifier.cc |
diff --git a/src/compiler/verifier.cc b/src/compiler/verifier.cc |
index bdc12fe4bcacbcbe1dc9e6d25d22820e69e2265d..71989ea58a61637a2955b22d970a536f5d51582c 100644 |
--- a/src/compiler/verifier.cc |
+++ b/src/compiler/verifier.cc |
@@ -684,6 +684,12 @@ void Verifier::Visitor::Check(Node* node) { |
break; |
case IrOpcode::kSpeculativeNumberAdd: |
case IrOpcode::kSpeculativeNumberSubtract: |
+ CheckUpperIs(node, Type::Number()); |
+ break; |
+ case IrOpcode::kSpeculativeNumberEqual: |
+ case IrOpcode::kSpeculativeNumberLessThan: |
+ case IrOpcode::kSpeculativeNumberLessThanOrEqual: |
+ CheckUpperIs(node, Type::Boolean()); |
break; |
case IrOpcode::kNumberAdd: |
case IrOpcode::kNumberSubtract: |